GHSA-85GG-2GFQ-Q95M Code Graph RAG structural tools follow out-of-root symlinks

A remote/local attacker who can get a symbolic link included in a source-code repository that code-graph-rag analyzes can cause the structuralsearch and structuralreplace tools backed by AstGrepService, exposed both as MCP tools and as agentic AI tools to read and -- via structuralreplace with...